Common base event model

The Log Analyzer maps the currently supported proprietary log formats into a common event model called Common Base Event. This allows the analyzer to use a common format for any log records from any supported proprietary log files. The parsers provided with the Log Analyzer map the log records from their current output format to this common model.

For example it will take this message from trace.log file

[7/10/09 19:46:19:007 EDT] 00000014 WSChannelFram A CHFW0019I: The Transport Channel Service has started chain chain_0.


and convert it into

<?xml version="1.0" encoding="UTF-8"?>
<CommonBaseEvents xmlns="http://www.ibm.com/AC/commonbaseevent1_0_1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.ibm.com/AC/commonbaseevent1_0_1 commonbaseevent1_0_1.xsd">
<CommonBaseEvent creationTime="2009-07-10T16:46:19.007000-07:00" extensionName="CBECommonBaseEvent" globalInstanceId="CEA1DE700FE6279E34CF32E43733313566" msg="CHFW0019I: The Transport Channel Service has started chain chain_0." elapsedTime="0" priority="0" repeatCount="0" sequenceNumber="0" severity="10" version="1.0.1">
<extendedDataElements name="category" type="string">
<values>AUDIT</values>
</extendedDataElements>
<sourceComponentId component="IBM WebSphere Application Server Platform 6.0 [ND 6.0.2.25 cf250801.02] [XD 6.0.2.1 cf10726.21183]" componentIdType="ProductName" location="10.21.127.197" locationType="IPV4" processId="13381" subComponent="WSChannelFram" threadId="00000014" componentType="WebSphereApplicationServer"/>
<msgDataElement msgLocale="en-US">
<msgId>CHFW0019I</msgId>
<msgIdType>IBM4.4.1</msgIdType>
</msgDataElement>
<situation categoryName="ReportSituation">
<situationType xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="ReportSituation" reasoningScope="INTERNAL" reportCategory="LOG"/>
</situation>
</CommonBaseEvent>
</CommonBaseEvents>